1. DEP is a security feature. A common security exploit is to force the execution of arbitrary data as if it were code. DEP prevents this. Unless you have good reason to do otherwise, DEP should be enabled.

1. DEP is a security feature. A common security exploit is to force the execution of arbitrary data as if it were code. DEP prevents this. Unless you have good reason to do otherwise, DEP should be enabled.

2. PAE has two primary features which can be enabled independently. Enabling DEP (as you specified in boot,ini) will load the PAE kernel, even without specifying the PAE switch. The PAE switch will load the PAE kernel but does not in itself enable DEP but permits accessing memory above the 4GB mark.

3. Having DEP enabled without specifying the PAE switch is a common situation. With modern 32 bit client systems this situation is almost universal. It is also common with servers. But if you wish to access more than 4GB RAM then the PAE switch is essential..

Specifying the PAE switch has few implications for applications, although there are exceptions.
DEP is far more likely to be a problem for applications. With your configuration DEP will be enabled for all applications except for those identified in the DEP configuration. If an application has issues with DEP you will need to specifically add it to the exception list.

1. The form of PAE that enables DEP is enabled. The form that enables memory above 4GB is not.

2. The situation with DEP enabled without the PAE switch is the default on almost all modern client systems and most servers as well. The PAE switch should not be enabled unless you need access to more than 4GB RAM when it is essential. The PAE switch is a global setting that cannot be disabled or enabled for individual applications.

3. Certainly.

4. "/noexecute=optout" means that DEP is enabled for all applications, except for those that are to be excluded. This would be recommended for servers running a limited number of applications - the usual case. "/fastdetect" is another switch with an entirely unrelated purpose.

"/noexecute=optin" means that DEP is enabled only for important system processes and others that have been explicitly selected. This is more common with client systems that typically run a wider set of applications.

Remember that there are two forms of PAE. One is associated with DEP, the other with memory above 4GB. They are independently selectable with only one thing in common - the both require the PAE kernel.
All combinations are possible and useful. DEP shuld be enabled unless you have a good reason to do otherwise.

An application that has a problem with DEP would crash, with a message identifying DEP as the cause.

DEP prevents the execution of data as if it were code. Any attempt to do this will trigger an exception and terminate the application to prevent what may be a security exploit. The problem is that this is sometimes done in applications for entirely legitimate purposes. This is most common with older applications written before the introduction of DEP.

A little history
Back in 1997 when I built my first custom computer using the revolutionary Gateway website I didn’t have much to choose from except for the CPU. The race between computer manufacturers was held back by processor manufacturers. They…

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that.
In this Article I'll show how to deploy printers automatically with group policy and then using security fil…